Cursor Remove the maliciously modified Claude Code 2.1.313 extension
BIBIBI
AT A GLANCE
Cursor Remove the maliciously modified Claude Code extension, potentially affecting up to 5000 users.
Article
Cursor A malicious version has appeared on the market Claude Code extension, affecting up to 5000 people
PANews October 30 reported that Cursor posted on X that a maliciously modified Claude Code VS Code extension had appeared in its extension marketplace (version 2.1.313), potentially affecting up to 5000 users. This version was not developed by Anthropic. According to Cursor a security advisory, the malicious extension collects user host information and attempts to implant a SSH backdoor.Cursor has removed the extension and recommends that users update their Claude Code extension to version 2.1.314.
Cursor posted on X that a maliciously modified Claude Code VS Code extension had appeared in its extension marketplace, with version 2.1.313。
02
This version was not developed by Anthropic.
03
Cursor The security advisory stated that the malicious extension collects user host information and attempts to implant a SSH backdoor.
04
Cursor The extension has been removed, and users are advised to update their Claude Code extension to 2.1.314.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This is an extension marketplace security incident: someone published a maliciously modified Claude Code extension. The extension may collect host information and attempt to implant a SSH backdoor, and Cursor it has been removed.
Why it matters to readers
Users of the affected version may face the risk of host information collection or a SSH backdoor, and should follow the update recommendations.
If you installed the Cursor extension through the Claude Code marketplace, you should verify the version and follow official security notices.
Risks and unknowns
Evidence not attached Cursor The original X post or security advisory link was not provided.
The potentially affecting up to 5000 users range has not been independently verified in the provided evidence.
Whether the malicious extension successfully collected information or implanted a SSH backdoor is not clear from the evidence.
Further disposition of affected users and attack infrastructure is unknown.
Related Developments
Loading event timeline…
Related concepts
VS Code extension
This term is not in the glossary yet. Browse related concepts in the glossary.
